CVE-2023-33934

概要

参考情報

• lists.apache.org/thread/jsl6dfdgs1mjjo1mbtyflyjr7xftswhc · Mailing List
• lists.debian.org/debian-lts-announce/2023/09/msg00042.html
• lists.fedoraproject.org/archives/list/[email protected]/message/BOTOM2MFKOLK46Q3BQHO662HTPZFRQUC
• debian.org/security/2023/dsa-5549

traffic server のその他の脆弱性

• CVE-2026-65100中 4.8Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure l…
• CVE-2026-58189高 7.5Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects …
• CVE-2026-58188高 8.2Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: …
• CVE-2026-58187高 7.5The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue a…
• CVE-2026-58186高 7.5The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache …